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@ Multiple access coding for radio communication. 



@ Individual information signals encoded with a common block error-correction code are assigned a 
unique scrambling mask, or signature sequence, taken from a set of scrambling masks having selected 
correlation properties. The^set of scrambling masks is selected such that the conrelation between the 
modulo-2 sum of two masks with any codeword in the block code is a constant magnitude, independent 
of the mask set and the individual masks being compared. In one embodiment, when any two masks are 
summed using modulo-2 arithmetic, the Walsh transformation of that sum results in a maximally flat 
Walsh spectrum. For cellular radio telephone systems using subtractive CDMA demodulation techni- 
ques, a two-tier ciphering system ensures security at the cellular system level by using a pseudoran- 
domly generated code key to select one of the scrambling masks common to all of the mobile stations in 
a particular cell. Also, privacy at the individual mobile subscriber level is ensured by using a 
pseudorandomly generated ciphering key to encipher individual infomnation signals before the 
scrambling operation. 
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The present invention relates to the use of Code Division Multiple Access (CDMA) commumcat,ons tech^- 
nicuIslnTdrtlphone comrr^unication systems, and more particularly, to an enhanced CDMA encodmg 
schemJ invlng scrambling sequences for distinguishing and protecting informafon signals ,n a spread spec 
brum environment 



BACKGROUND 



The cellular telephone industry has made phenomenal strides in commercial, operations m the United 
Statis aaS as the rest of the world. Growth in major metropolitan areas has far exceeded expectebons and 
fs oute^ipXng sy^ capacity. If this trend continues, the effects of rapid gro^h will soon reach even the 
LallesTmTrkei InnovaL solutions are required to meet these increasing capacity needs as well as ma.n- 

"-rrg^t^t^erriron™^^^^^^^^ 

usli;g"he n:xt generation of digital cellular system infrastructure and cellular frequences. The key feature de- 

MultrD^e Mcess (TDMA) methods. As illustrated in Fig. 1(a). in FDMA. a communication channel is a single 
lofea^ency b^nd i^^^ a signal's transmission poweris concentrated. Interference with adjacentchan- 
S is Sed by th^^^ bandpass filters that only pass signal energy within the filters' ^P-^-^^^^^^^^^^^ 
SJnds Thus, wfth each channel being assigned a different frequency, system capacity is limited by the avail- 
ahlP freauencies as well as by limitations imposed by channel reuse. . , . • ,^,„oi» 

>n TDMAsvstems as shown in Fig. 1 (b). a channel consists of a time slot In a periodic tram of time in erva s 
ove the sameCue^i Eac^ period of Le slots is called a frame. A given signal's energy is confined to 
Tne c^f thS"«n^^Tots Ljacent channel interference is limited by the use of a time gate pr other synchronH 
zaLn llLme^Uhat only pises signal energy receh^ed at the proper time. Thus, the problem of interference 

n"S^n~^^^^^^^^ the transmission signal into a shorter time slot. 

Asa^esuTthrinformati^ 

^focXied spectrum proportionally. The frequency bandwidths occupied are thus larger in F.g. 1(b) than in 

WUh FDMA or TDMA systems or hybrid FDMA^-DMA systems, the goal is to ^j^^^'^'^^^'.^'^^J^^^f^ 
interfering Sgnl'do not occupy the samefrequency at the same time. In -"f^^^'^^f .^^^^^^^^^^^^^^^ 
ZZ (CDMM allows signals to overlap in both time and frequency, as illustrated in Fig. 1(c). Thus all CDMA 
sfana s shafi t^e same J^quency spectrum. In both the frequency and the time domain, the multiple access 
J,nnals oveHap Van^us a^^^^^^^ communications are described in "On the Capacity of a Ce lular 

CDMA sTstem'- broTousen. Jacobs. VHerbi. Weaver and Whea«ey. IFFF Trans on Vehicular Technology . 

^^''ll a wpical CDMAsystem. the informational datastream to be transmitted is impressed upon « "^l^'^'l hj9^^^^^ 
bit rite dataSeam generated by a pseudorandom code generator. The informational datastream and the high 
biUaSdatasreamarrtypican 

b a e dataSeam is called coding or spreading the informational datastream signal. Each informational da- 
tes?eam ofcHne^ i^^^^^^^ a unique spreading code. A plurality of coded information signals are b^ns- 
rdTnradio.equency.^^^^ 

r V^^^ltC™^^^^^^^^ unique spreading codes, the co.esponding infor- 

"Thif^l a numte? ^"advrntege's associated with CDMA communication techniques. The capacity limits 
of CDMrbased cerirr systems are projected to be up to twenty times that of existing analog technology as 
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#»r nrivacv for callers and greater immunity from air time fraud. 

' Des^e the numerous advantages afforded by CDMA systems, the capacity °r~"Ventonal CDMA s^ 
terns is limited by the decoding process. Because so many different user communications overlap in time and 

5 leTuency he task of correlating the correct information signal with the appropriate-user .s complex In prac- 
STmplementations of CDMA communications, capacity is limited by the signal-tonoise ratio, which is es 
'rntiLZa measure of the interference caused by other overlapping signals as well as background no.sejh^ 
geneXroblem to be solved, therefore, is how to increase system capacity and still maintain system integr ty 
TnS atLonable signal-to-noise ratio. A spec^ic aspect Of that problem is how to optim^ 

,0 tinguishing each coded information signal from all of the other information signals and noise-related interfer 

""'^ Another issue to be resolved in CDMAsystems is system security and individual subscriber P^vacy. Since 
allof the coded subscribersignalsoverlap.CDMAdecoding techniques typically require hatthe^^ 
used to distinguish each information signal be generally known. This public knowledge of the actual codes used 
IS in a particular cell invites eavesdropping. 

siJmmary 

The encoding of individual information signals is simplified by encoding each signal J ^J^^j""" J'^^^ 
20 error-correction code, which may be readily decoded using a correlation device such as a Fast W^^^J^^"^- 
?orm circuit. Each coded information signal is then assigned a unique scrambling "^^'^^^^^^^^^^^''^^^^ 
taken from a set of scrambling masks having certain selected auto- and cross-corre ation P^P^^t'^^-^^^se 
Jcrambirg masks are ordered based on the signal strength of their respectively assigned coded 'nformahon 
signr To rnhance the decoding process, the highest ordered scrambling masks are '"'"-"y ^.^^^^^ 

25 auence to descramble the received composite signal. In general terms, the scrambling mask set is selected 
such that the sum of any two scrambling masks, using modulo-2 arithmetic, is equally correlated in magnitude 
o ^co I^ords onhe'common block error-correction code. For the case where the ^^^^^^^^^"^^^ 
code is a Walsh-Hadamard code, if any two scrambling masks are summed using modulo-2 arithrrietic and 
"e binary^a ues of the product are represented with .1 and -1 values, then the Walsh ^-^^-'^^^^^'^f^^^^ 

30 reJu?^ in a maximally flat Walsh spectrum. Sequences with such a spectrum are sometimes referred to as 

"''^Tn the coS of cellular radio telephone systems using subtractive CDMA demodulation techniques the 
preset nvent on nl%^^^^^ a two-tier ciphering system to ensure security at the cellular system l^el and 
p Wacy at the individual mobile subscriber level. At the system level, a pseudorandomly 9«"«"f^ «>*^« 
35 Ts used to select one of the scrambling masks common to all of the mobile stations in a particular ceH. At the 
Tbscriber level, a pseudorandomly generated ciphering key enciphers individual information signals before 
the scrambling operation. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention will now be described in more detail with reference to preferred embodiments of the 
invention, given only by way of example, and illustrated in the accompanying drawings, in which. 

Figs 1 {a)-{c) are plots of access channels using different multiple access techniques. 

Fig 2 shows a series of graphs illustrating how CDMA signals are generated; 
45 Figs. 3 and 4 show a series of graphs for illustrating how CDMA signals are decoded: 

Fiq 5 shows a series of graphs illustrating a subtractjve CDMA demodulation technique; 

Fig. 6 is a generalized schematic showing a spread spectrum communications system; 

Fig. 7 is a functional block diagram of a system that may be used to implement one of the preferred em- 
bodiments of the present invention; 
50 Fia 8 is a block diagram of another receiver in accordance with the present invention and 

Fig. 9 Is a functional block diagram of a system that may be used to implement another of the preferred 

embodiments of the present invention. 
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After demodulation of the '^^^^ ^ , i ^ay be decoded or desprea° J ^^^^^^ ,„ s.gt^al 

.. Lai takes place, information signal m y , jnally to modulate s^nai ^^^^^ j^. 

, These decisions may be made bV ^^"9 acceptable as long as there ^.^^ .^^h 

r of.rh -hard" decision making processes average chip value s i - j^^.^y 

sional. l<la««y. '"^ coombuw." of un"^" (Two binary sefluebCS ^"^^ exist for a glvea word 

rdegene'.to..e.g..themob e^^^^^^^^^ and for a direct spreading system it is^d^ 

the energy of the "--'^J^i^eter of spread spec^"n;;v;;j^^f;4"tformation bit rate. i.e.. the number 

-processing 9« " J 3" P'ading or coding bit rate to the underiy. 
f ined as the ratio of - ^boi; : 

chips per information bit or symo 
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a one megabit per second '^f,,^'^";' "^.i^ Ta^to^^^^^^^^ datastream bit rate. . 

for example, is 8:1. the ratio of the code chip ^Jte t° tne^^^ ^. ^^ modulated using uncorrelated codes. 

Large processing gains reduce the chance ^^^l^^^^^^^^^^ .^e suppression orhostlie jamming s,g- 

For exam Je. processing gain is used "^'^fj^^^^^^^^ helps suppress other, friendly signals 

nals In other environments, such as cellular syste""^. process, g g ^^^^orrelated with the desired 

"hit are present on the same communications <^'^^;"^' ^" includes both hostile and friendly 

'c^^eTn the context Of the subtractiveCDMAdem^^^^^^^^^ , ^..g^^, ^e decoded^ 

signals, and may be defined as f ^ ^'9"f il required and the processing 

Expanding the example described above ^a^'9"^\*^'^^:Vty ^ allow up to 101 signals of equal energy, to 
gain is 1000:1. conventional CDMA systems have the ^paaty ^^ ^/loooth of their original 

IZe the same channel. During f ^^^^^^^^ as compared to the desired in^. 

lowed overlapping signals in the ^^'"^^'^^^"f ^^.'^f ^'^^^^^^ the above-cited paper by Gilhousen et al. ■ 

of CDMA systems may be recognized ^^'^^^^^J^^^^^^^^^ subtractive CDMA demodulation technique 

,n contrast to conventional CDMA. ^7"^^^°'*^"* ^'^5^^^^^ is not limited by the processing gam of the 

is the recognition that the --^^^^'^^^1^^^^''°^^^ of military type jamming signals. A large 

soread spectrum demodulator as is the case with tne ^ PP unknown amming signals or 

p'eSntage of the other signals included l^^^^^^^tli Z'^^^^^ as defined above, is Known and s 

environmental noise that cannot be corrda^ed^^ 1^^^^^^^^^^ 

used to facilitate decoding the signal of '"^er^st T^^^^^^^^ subtractive CDMAdemodulation tech- 

are known, including their corresponding sp^a^^^^^ 

r:r=rn^7rtrc^^^^ 

Td-^rrr tS ^^^^^^ — ^- ^'^-^^ " 

not interfere with the decoding of the ^--^a'^f ^ ^^^^^^^ ^s shown in the signal graph (a), the coded 

For example, in Fig. 5. if signal 2 has already ''f ^" ^ (c) (with the start of the first bit 

; form o sTgnal'2 ;an be reconstructed a-^'-" I^^^,. '^^^.^^^ fourth chip of the code for 

period of ?he reconstructed ^atastream Jor s^^^^^^^^^^^^ ^^^^ the s.gna^ 

signal 2 as shown in Fig. 2 signal graphs ('I) a"f! (^^^^^^^^^ ^jgna, 2 aligned with the fourth chip of the re- 
graph (d) (again with the first chip of the reconstruc ed coded s.g ^^^.^^ ^^^.^.^^ by comparing 
Lived composite signal) to leave code^ -gnal 1 n ^^--^J^ ^ ^J^^,^^ ,He first three and the very la^ 

V, cinnal flraoh (e) in Fig. 5 with signal graph (c) in Fig. ^ vwui. j reconstruct signal 1. Note 

Chip) I goal l1s recaptured easily by -'«P.ying the coded s^^^^^^^^^^ ^ ,y 2 

that because the bit periods °^ <*atastreamsfor ^gna^s^and^^^^^^^^ ^ ^^^^^ ^.^ ^ ^,^^3, ^^^^^^^ ^ 

inq signal 2 from the composite signal. onniunction with Fig. 6. An information source such as 

^ A general CDMA system will now be descnbed in ^°"J""'=^'°"^^^^^^^ 3^^^,^ ^oder 20. The digital bitstream 
speecStsconvertedfromanalogformattoc^grtalform 

50 generated by the transmitter source '^"''f ^0 may be^^^r^he^^^^^^ ^^^^^ transmission. In response to a spread- 
i2thataddsredundancywhich.ncreasesthe.bdndw.dth^ ^ programmable microprocessor (not 

ing code selection signal from a suitable control rne'^ham^^ ^^^^^^^^ ^4. which as descrn 

shown); a particular spreading code is generated a transjn.t sp ^ y ^^^^^^ ^ 

bed above may be a pseudorandom ""'"'>«^.f "^.f J'"i''r^^^^^^ Lder 22. It will be appreciated that the 

55 2 adder 26 with the coded information fr^^J^^Xa^^^^^^^^^^ operation in binary logic The mod- 

modulo-2 addition of two binary «a'i"!"'^«VhrcnSation fTom the coder 22 into a plurality of -chips". 
u,cH2 summation effectively "=P;«^^^:;,^;^^^^^^ a radio frequency (RF) carrier using any one 

The coded signal output by the adder 26 is *° J^^^^^^iator 28. The modulated earner is transmitted 
of a number of modulation techniques, such as QPSK. in a mo . . 
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•H.r -^0 A Plurality of the coded signal^overjapping 

spreading code generate 24^ H^J^H^^J^^ 3 single bit of transm.tted "^^iainThe actual values 

38. Because several receded ^^.ps reP^^^^^^ ^ J^^,^^ ,h.ps .n order to ojt^nj 

'oodes are orthoaonlto these unwan«.is,9 ,„e«oa co-ilng is based on er*os«na, 

mainlalned. ^ ,h. oresent invenUon. the error correcoon a coding, a number of 

Zoo Signal is the 4-bit binary -'^^^-^g^^, block code and has a sP-f ^^eyed per codeword, 

of 10). such a code is ^^JJ^^^^^^'^iJis one'further bit of information may be conveyed pe 
By inverting all of the bits orthoqonal block coding. orthogonal block code- 

tL type of coding is ^"07 -^ ''^-°^^^^^^^ that simultaneous f ^rlsfo m d^^^^^^^ 

A significant feature o ^"'^^^^"f^fg^fl ^y means of a Fast Walsh Transfo^'"JF^'J ^^,3^ ^^^^ 
wor^sinasetmaybeper^^^^^^^^^^ 
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A significant feature of ---^Jl^^—^ "^eans of a Fast Walsh Transform^r-w 'J — ^ .^..^ 

r-rc^dCirir-rjA-- 

U.S. patent Application Senal N« J35 805 1 ^^^^.^^^ ^^^.^^ ,3 ""'""tl"' ence to scramble each 

,n accordance v.ith one ^^P^^^^.^^'^^Jd 3 scrambling mask or a «'9"«*"^V^^"X^3d^^^ 
by using a different ^--^^";^^'^;^^:V2 addition, such a scrambling ;"-^^^3"j3";/3'ji:tUntly at the 
block-coded informajon . f^S^nsmitted. That same scrambling mask .s 
block-coded information and the resiJ.i composite signal. ^ 

by suchashiftreg.ster.s2M b^ts^^^^^^ ^^.^^^ ^^^^^^ TsJ^rsbft^^ and-1/N with any bit- 

,5 maximum penod implies maximum g ^^relation of unity w. h 't^^'^"^"" . ^. ,e different shifts of 

auto-correlation property that ^ac*' m^sk n scrambling mask. J "JP'^^^d-spectrum sig- 

shif t of Itself. Where N is the ""^f ^^Jj'j*,^ scrambling masks for a desired 

a maximal length sequence ''^^^ ^l"^^^^,^,^,, time-synchronized to one ano her to prese 
nals. provided that those signals ^^^l^^^l^^^,,^, to arrange ''-"-'"'^^^^^^i^T^'n T several chips. (In 
so relative bitshif ts. Unfortunately. U s usual^^y^^^P^^ ^^^^^^^^ ^^T\ I ZaSeaL for signals 1 and 

not adequate scrambling masks beca ^^^^ sequences that 

6 - 
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deword of varying bit values. Thus/th6 de- 

any orthogonal codeword masked Dy .eroded conveniently using an 

other scrambling mask. hi-orthogonal block codes may be d^aeo c 2" signal 

in that 1 /N times the sum of ^^"^Jf^^Vvalues.^ correlations take on ' ted by the FWT 

determined, giving an index . ^.n^ggnitude correlation. ^ ^ t^^e interference 

Hadamard code set. the result .s a ° scrambling masks are ^"^f ^hteh two cosets 

are being compared and independent of wh ^ ^^^^^^^^ ^ 

Sloane.IheIheoDLOfSrror:^^ Minn mask sets. The first meth- 

1 . select a primitive polynomial PW ^^^^^ ^ ^ee 19". National Secunty Agency was 9 
''^°j:^;ample.forn=.and^pCX)- 

2. Use p(X) to define a Galois f lela GF(2 ) witn p .. ....... . . 
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. nt.. 0 1 a a3 a^ If k=1 . form the.standard Galois f ield GF(2) With 

GF{2'') consists of 0=2" elements. 0. 1 . a, a . a a 

elements 0 and 1. . i3 ^rmed with elements (0. 1. a. a^) where p(a)-o 

For the example above in which n-4. the gp^^ } « 
defines the element "a- 3. « consisting of n-1 = 2^1 elements of the Galois field GF(2 ). 

3. Form the sequence: {1. a. a , a . 1 
namely, all elements except zero. (For k-1. this is (1).) 

"'"fo; the n = 4 example, this gives ^^^^^^^^^j giving the sequence: 

4 Replace each element In the ^eq^enpe w^h its polynom. P ^ ^„ . ^ 

f Ha) = 1.f " (a) = a,b^ (a) - ^• "•^ ^ ' expressed as a polynomial in "a 

This can he done as follows. Each oftheeler^^^^^^^^^ Vo ^ive the "K-U^ple" repre- 

ofdegreek-1:bo + b,a + + b,.,a 

sentation of an element in GF(2 )- .^gg. 

consider the n=4 example above. The fa« »nai Pv ' f ^ ^ ^ ^ 

This aives a sequence of the integers 1 . 2, ... n i. noi n 

^"%rthe n=J example above, this gives -^^'^^^^l;,''^^^ replace each integer (index) in 

(0011 0110 0101) = (O01101100101). (or (2.3.1); =nd 

(01lo'.010l'.0011) . (011001010011). 7 „ „, . N bits by ins.rSno In *»nt of e.oh 

quence the n-bit waisn naua ^ ^^^.^ sequences: 

(.„s;r;^o:^?n?~,,~ 

bling masks of length n^ (i.e N). . scrambled information signals have desired a^to-correlation 

Thebasesequencecanbechosensothatthesc^^^^ ^.^^ n,isalignments are present A^so m 

45 masks is given by: 

{0000 1010 0011 1001) 

{0000 1100 0110 1010) 

{0000 1001 0101 1100) 
„ '°'»;rJo:Xr:e.Ko.A,o,<»ns..c«n,,a„,d.^se.o,N».cra..an.™^ 
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METHODS: 

..ethodB.asetofM/2scramblingmasksof.^^^^^^^^^ 
of the hi codewords of length N which r^^e up a Kerdock ^e^ ^ -supercede" in that consiste of 

to a common base sequence as in step 10 of Method a_ a ^^t^u^n. the permuted Kerdock code 

S/2 c^de sets, each of which is a ^j^^^';;^;;:' ^"^^^^Ts 
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.. * r.r^f-nrrierReed-Muller code set with (N/2-1) cbsets 
AKerdock code is formed by the union of a cychc for^^^^^^^^ 
as described in the book by MacWilliams and Sloane men^^oned above Th ^^^^^^^.^ 
containing 2N bi-orthogonai -^-ord^ '^^fKerdoc^ Le has the property that the modolo-2 sum 

M. By P;-"^-: ^cod^^^^^^^^^^ ^ 

of a codeword from one cooe sei wmi « ^^ckQ of lenath N is as follows: 

The procedure for generating the ^'2 scramblmg maste 

1.GeneratetheN/2codesetrepr^^^^^^^^^^^ 

each CSR separately. Each N-bit CSR (csr^ has the form: 

csr 10 1^ ei,] 1 0 |x ^|et-x: ei,] I 

* A M hin R fN/2-1 bits) C (1 bit), and D (N/2-1 bits) into one 
„he„ lAlBlolDl denotes .h=conca«raU.n^^^^^^ 

GF(2'=N/2), where r=log2(N/2). Thus, a ur^iN/^t; 

sentative. m/o-a r 3 and t=1 Then the special idempotent polynomials (and hence 



30 series) are given m tne aoov^m^uu..... .^^-.-^^ ^ ^ (100IOII) 

q\ = 1 + X1 + X2 + X* = {1110100} 
so that, with modulo-2 arithmetic: ^ ^ =(0111111). 

Thus, each CSR has the form: 
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csr, = 101x^(63*) |otxi(e/ ^ e/)l 

- |olx3({iiioioo))|o|xi({0lliiii})l 

oion f^r i-0 1 N/2-1 gives the eight CSRs in the following Table 1 . 
Evaluating this expression for j-0. i w/ii i y 
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Table 1. Example of 16-bit Kerdock CSRs 



representative 


sequence 


n 

u 


0000 0000 0000 0000 


i 
1 


0011 1010 0101 1111 




0001 1101 0110 1111 




0100 1110 0111 0111 


4 


0010 0111 0111 1011 


5 


0101 0011 0111 1101 


6 


0110 1001 0111 1110 


7 


0111 0100 0011 1111 



2P.,„u.eeacMN«-bH)ha„o,.achK.r.ocKCSR,oob.,n,He,.«.ndK.M..Keso,apar™,.dse- 

half of .h, Kerto* CSKs. Th.. '""'■^J'^S^^.^Z^^.U^,^^ half of .he Ke.dock CSR. 

tuple. Where r-lo9,(N/2). The r-tuple has the form^^^ as co^ificients of powers of 2 (i.e.. bo + 2b, * 
^ ,a-. By interpreting t^-- - '-^^^^^^^^^^ ^^^^^^^ 3„ coefficients 



. i. By interpreting the coeff ic ents ^o^j^ -^r^-'^/^^^J;;'^^^^^ „ 1 . for all s , the coefficients 
4b2 ... * 2'- ^b,. 1). an integer m the range [0. N/2-1] res^^^^^^^ 
b/providing a binary representation of the '"^^^--^^J,^^^^^^^^^ ,b.- ....b.b,bo. 

the permuted sequence. Note t^^^ f '^%^;"^;>'J„^^^^^^^^ Kerdock code is defined by 

For the example above ^^-^^^^l^^'^rl^^^^^ representations of the elements in GF(8) 

;re^:;:s^^^^^^ 
ro:r:rp:-rrt:.^^^^^^^^^^^^ 

the 3-tuples backwards). 
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field element 


3-tuple form 


old position 


new position 


0 


000 


0 


0 


1 


100 


1 


1 


a 


010 


- 2 


2 


a2 


001 


3 


4 


a3 


110 


4 


3 


a* 


oil 


5 


6 


a5 


liV 


6 


7 


36 


101 


7 


5 
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10 



10 



15 



20 



EP 0 565 506 A2 

Table 3. Set of IB-bit Permuted 

Sequences 


index 


sequence 


0 


0000 0000 0000 0000 


1 

2 


nni1 1001 0101 1111 
nnfVI1110_01^ 0111 


3 


0101 0011 0110 1111 


4 


ooio^iii_oilL^^ 




0100 1101 0111 1110 


6 


ni11 0100 0111 1011 


7 


niio 1010 0011 1111 



25 



XI «fKW these may be converteamioiN/^=-— 

3 Having constructed N/2 permuted sequences o^^^^^^ 

I,- :« /n'lxfon in Table 4. 



30 



of scrambling masks is given in Table 4. 

Table 4. Set of 16-bit Scrambling 
Masks 



35 



Index 



seqence 



0000 1111 0000 1111 



0011 0110 0101 0000 



40 



45 



0001 0001 0111 1000 



5 
6 



0101 1100 0110 0000 



0010 1000 0111 0010 



0100 0010 0111 0001 



0111 1011 0111 0100 



0110 0101 0011 0000 



50 
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Source information, e.g., speech, is converted to blocks of M (or M+1) binary bits in a source coder 50, 
and these bit blocks are encoded by an error correction orthogonal (or bi-orthogonal) block coder 52. The or- 
thogonal 2M.bit block codewords are scrambled by a modulo-2 N-bit adder 53 with. a scrambling mask, con- 
structed as described above, retrieved from a look-up table in a memory 60. In the case of ideal scrambling 
masks, there are either nA=N'^ ornB==N/2 scrambling masks, depending on which method was used to generate 
the scrambling mask set Thus, the number of bits needed to address each mask from storage 60 is either 
bA=log2(nA) or be^logzlne), and by transmitting the bA-bit or be-bit scrambling mask selection address associ- 
ated with a particular scrambling mask to the memory 60. that mask is retrieved from storage and modulo-2 
added to the block coded signal. , 

The ability selectively to address and retrieve a specific scrambling mask becomes important in determin- 
ing the order in which signals are decoded from a received composite signal. For example, if stronger coded 
information signals are decoded first and removed from the composite signal before weaker signals are de- 
coded, the scrambling masks must be ordered by the signal strength of their associated, coded information 
signals. In CDMA subtractive demodulation according to the patent applications incorporated by reference 
above, the scrambling mask corresponding to the strongest information signal would be selected for decoding. 
After that signal is removed, the scrambling mask corresponding to the next strongest information signal is 
selected and so forth until the weakest signal is decoded. 

The masked block codewords from the N-bit adder 53 may be applied to a parallel-to-serial converter and 
modulator 54 where they are impressed on a radio frequency carrier. The modulated signal is amplified and 
transmitted via a transmitter 56 and antenna 58. 

At the receiver, the composite signal received by an antenna 61 is provided to a receiver demodulator 62 
that demodulates, samples, and digitizes the composite signal. A serial-to-parallel converter 64 converts the 
serial samples into parallel blocks of signal samples (which may be complex, corresponding to in-phase and 
quadrature signal components). The order in which each information signal is decoded in the receiver is de- 
termined by the receive scrambling mask selection address bA or be applied to a scrambling mask memory 
66. In a specialized N-sample multiplier 68, each of the N parallel samples buffered in the serial-to-parallel 
converter 64 is multiplied by +1 or -1. depending on the scrambling mask retrieved from the memory 66. One 
way to perform this multiplication is to exclusive-OR each bit of the digital sample with the corresponding 
scrambling mask bit. For example, if the first of the N digital samples is 1011 and the first scrambling mask 
bit corresponds to -1. then the first of the N output samples would be 0100. If the received samples are conrv 
plex, different scrambling masks could be used for the in-phase and quadrature components. 

The descrambled signals are decoded in a block decoder 70. which may include an FWT circuit 72. The 
index of the transform component having the largest correlation magnitude (bi-orthogonal code) or value (or- 
thogonal code) is determined and selected as the decoded information by an ordering and selection circuit 
74 A suitable device for determining the largest of a number of input values is described in co-pending, conv 
monly assigned U.S. Patent Application Serial No. 761, 380 filed September 18. 1991. For simplicity in this ap- 
plication, the term "magnitude" will be used to refer to correlations with both orthogonal and bi-orthogonal 
codes. The FWT circuit 72 would preferably operate on complex numbers when the demodulator 62 and con- 
verter 64 deliver complex signal samples, which is often the case when the phase of the received signal is 
not known. The decoded M or M+1 bits of information are received by a source decoder 76 for conversion into 
analog form. e.g. speech. 

Using the scrambling masks generated as described above, interference from signals having scrambling 
masks different from the one selected at the receiver is distributed equally, at least in theory, over each of the 
F\/VT circuit's correlation outputs. 

Because no spurious peaks occur, the risk is minimized that an error will be made in determining the largest 

correlation as the decoded information. 

In multiple access spread spectrum communications, it is not uncommon for the receiver to use the method 
of RAKE combining to combine correlations from different signal rays (i.e.. to collect energy from a signal and 
its echoes). For the system shown in Fig. 7. this would appear as a RAKE combining element 73 between the 
FWT circuit 72 and the ordering and selection circuit 74 as illusfrated in Fig. 8. For each of the N outputs of 
the FWT circuit, results from different signal times-of-arrival would be weighted and accumulated, before being 
sent to the ordering and selection circuit. Data corresponding to the different times-of-arrival would be provided 
by the serial-to-parallel converter 64. Furthermore, a new method, referred to as WRAKE combining, could 
be used in place of conventional RAKE combining. The RAKE combining technique and the new efficient 
WRAKE approach are detailed In co-pending, commonly assigned U.S. Patent Application Senal No. 857 433 
filed on March 25, 1992. for "RAKE Receiver with Selective Ray Combining", which is expressly incorporated 
here by reference. 

When the length N of the scrambling masks, or signature sequences, is an odd power of two {i.e., when 
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N=22z-i where Z = 1, 2» 3, ...), ideal, correlation properties are not obtainable. In other words, it is impossible 
to construct the scrambling masks such that the sum of any two is a bent sequence, equally correlated in mag- 
nitude to all N Walsh-Hadamard codewords. In this case, however, one can use a "half-bent" sequence, which 
5 is a sequence that is equally correlated in magnitude to half of the N codewords and has zero correlation with 
the other half. Thus, it is possible to construct sets of scrambling masks such that the sum of any two is a 
half-bent sequence. A set of scrambling masks having this property may be called a "semi-ideal" set. 

In accordance with the invention, two ways of constructing semi-ideal sets of scrambling masks are pro- 
vided. In the first way, either Method A or Method B (the two Methods described above for creating ideal sets 
10 of scrambling masks) is used to generate a set of either (N')*^ or N72 scrambling ^asks. respectively, of length 
N', where N -2N (where N is an odd power of two). The modulo-2 sum of any two of these scrambling masks 
of length N' would be a bent sequence, equally correlated in magnitude to N*=2N codewords of length N*=2N. 
Then, the last half of each scrambling mask (which is N bits long) is dropped, leaving masks of length N72=N. 
Therefore, the modulo-2 sum of any two of these truncated scrambling masks of length N would be a sequence 
15 of length N that could be equally correlated in magnitude to at most only N74=N/2 codewords of length N72=N. 
Thus, depending on which Method is used, a set of either (2N)*^ or N scrambling masks of length N is formed 
such that the sum of any two scrambling masks is half-bent. 

In the second way of consb*ucting semi-ideal sets of scrambling masks, either Method Aor Method B above 
is again used to generate a set of either (N')*^ or N72 scrambling masks, respectively, of length N*. where N'=N/2 
20 (where N is an odd power of two). The moduIo-2 sum of any two of these scrambling masks of length N' would 
be a bent sequence, equally correlated in magnitude to N*=N/2 codewords of length N-N/2. Then, for each 
N' length sequence, a copy of itself is appended, giving masks of length 2N'=N. Alternatively, it is also possible 
to append a copy of a different mask to each mask instead of appending to each a copy of itself. Therefore, 
the modulo-2 sum of any two of these duplicated scrambling masks of length N would be a sequence of length 
25 N that still could be equally correlated in magnitude to at most only N-N/2 codewords of length 2N'=N. Thus, 
depending on which Method is used, a set of either (N/2)'^ or N/4 scrambling masks of length N is formed such 
that the sum of any two scrambling masks is half-bent. 

For both cases of N (i.e.. N either an even or odd power of two), the above methods may not yield large 
enough sets of scrambling masks. These sets can be augmented by more scrambling masks, but the modulo- 
30 2 sum of two such masks may no longer be a bent or half-bent sequence. However, these sets can advanta- 
geously be augmented so that the modulo-2 sum of any two masks is equally correlated in magnitude to at 
least some subset of the codewords. A sequence that is equally correlated in magnitude to a subset of the 
codewords and uncorrelated to the remaining codewords will be referred to as a "partially bent" sequence. 
To augment ideal or semi-ideal sets of scrambling masks, two methods (Methods 1 and 2) may be em- 
35 ployed. Both methods use special masks which are modulo-2 added to each scrambling mask in the original 
ideal or semi-ideal set. Each special mask produces another set of scrambling masks and these sets may be 
combined to form an augmented set of scrambling masks. If U is the number of scrambling masks in the original 
ideal or semi-ideal set, then the number of masks in the augmented set isSU, where S is the number of special 
masks. These special masks are formed by concatenating P patterns of length L. where PL=N and P and L 
40 are also powers of two. 

In Method 1, there are two possible patterns: the all-zero pattern (L zeroes), and the all-one pattern (L 
ones). A set of Si scrambling masks with the length P is formed, using either Method Aor Method B (the two 
Methods described above for forming ideal sets of scrambling masks, which are also known as "good" sets of 
scrambling masks because of their "good" correlation properties, such as having minimal mutual cross- 
45 correlations between members of the sets). Each of these P-length scrambling masks is extended to an N- 
length special ma6k (complement mask) by replacing each "0" with the pattern of L zeroes and replacing each 
"1" with the pattern of L ones. Then the original set of U scrambling masks of length N is augmented to S-jU 
masks by modulo-2 adding each special mask to the U masks in the original set. 

For example, consider the previous example s^t of four scrambling masks of 1 6-bit length created by Meth- 
50 od A. To augment this set using method 1 , a set of scrambling masks of length P=4 is needed. Using Method 
Afor this set yields two masks: {0000}. and {0001}. Replacing each 0-bit with four zeroes and each 1-bit with 
four ones yields two special masks: 
{0000 0000 0000 0000} 
{0000 0000 0000 1111}. 

55 Applying the first special mask to the original set gives the elements of the original set: 

{0000 1010 0011 1001} 

{0000 1100 0110 1010} r 
{0000 1001 0101 1100} 
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Applying the second special mask to the original set gives the following elements of a new set: 



{0000 1010 0011 0110} 
{0000 1100 0110 0101} 
5 {0000 1001 0101 0011} 

{0000 1111 0000 0000}. • 
Thus, using both special masks, an augmented set of eight scrambling masks of 16-bit length is obtained. 
In Method 2, each special mask consists of a single L-bit pattern repeated P tinnes. A set of S2 scrambling 
masks with length L is formed using either Method A or Method B. Each of these length L masks is then re- 
10 peated P times, giving rise to S2 special masks (pattern masks) of length N. As in|/Iethod 1 . each special mask 
is modulo-2 added to the original set of U scrambling masks to produce U new scrambling masks. Thus, an 
augmented set of S2U scrambling masks is formed. 

For example, consider again the previous example set of four scrambling masks of 16-bit length created 
by Method A, To augment this set using Method 2. a set of scrambling masks of length L=4 is needed. Again, 
IS using Method A for this set yields two masks: {0000}, and {0001}. Repeating each pattern P=4 times yields 
two special masks: 

{0000 0000 0000 0000} 
{0001 0001 0001 0001}. 
Applying the first special mask to the original set gives the elements of the original set: 
20 {0000 1010 0011 1001} 

{0000 1100 0110 1010} 
{0000 1001 0101 1100} 
{0000 1111 0000 1111}. 

Applying the second special mask to the original set gives the following elements of a new set: 
25 {0001 1011 0010 1000} 

{0001 1101 0111 1011} 
{0001 1000 0100 1101} 
{0001 1110 0001 1110}. 

Thus, using both special masks, an augmented set of eight scrambling masks of 16-bit length is obtained. 
30 It will'be appreciated that Methods 1 and 2 advantageously can both be used together, either by combining 

them individually, yielding S-, + S2 special masks, or preferably by applying them to each other, yielding SiSj^Sy 
special masks. Thus, as many as SjU scrambling masks, where U is the number of scrambling masks in the 
original set (Method A or B), can be generated. 

For example, consider the special masks formed in the examples above. Applying the first special mask 
35 of Method 2 to both special masks of Method 1 gives both Method 1 special masks: 
{0000 0000 0000 0000} 
{0000 0000 0000 1 1 1 1 }. 

Applying the second special mask of Method 2 to both special masks of Method 1 gives two new special 
masks: 

40 {0001 0001 0001 0001} 

{0001 0001 0001 1110}. 

Thus, using both Methods 1 and 2. four special masks are obtained. In general. S1S2 > Si + S2, except 
when Si=S2=2. 

Applying the first special mask to the original set gives the original set: 
45 {0000 1010 0011 1001} 

{0000 1100 0110 1010} 
{0000 1001 0101 1100} 
{0000 1111 0000 1111}. 

Applying the second special mask to the original set gives the new set (encountered in Method 1): 
50 {0000 1010 0011 0110} 

{0000 1100 0110 0101} 
{0000 1001 0101 0011} 
{0000 1111 0000 0000}. 

Applying the third special mask to the original set gives the new set (encountered in Method 2): 
55 {0001 1011 0010 1000} 

{0001 1101 0111 1011} 

{0001 1000 0100 1101} : vrvl':= :> 

{0001 1110 0001 1110}. :; nr:fTtnc!=T-*^j^*^Tn^: 

Applying the fourth special mask to the original set gives the new,^s^et (not^^^^ 
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{0001 1011 0010 0111} 
{0001 1101 0111 0100} 
{0001 1000 0100 0010} . ! 

5 {0001 1110 0001 0001}. 

A cellular communications system consists of base stations and users in each cell, for both uplink (user 
to base station) and downlink (base station to user) transmissions, interference from adjacent or nonadjacent 
cell signals can be minimized by carefully assigning different scrambling masks to the signals in different cells. 
The problem is analogous to frequency assignment or allocation in current cellular mobile radio systems. 
10 There is some limited number of scrambling masks which form a set of scrambling masks having the de- 

sirable correlation properties. Of the total scrambling masks, there are subsets of scrambling masks which 
have good correlation properties, whereas correlation properties between masks of different subsets may not 
be as good. Also, if there are more signals than scrambling masks, the scrambling masks must be reused. To. 
minimize interference, scrambling masks with "good" correlation properties (i.e., having the property that the 
15 average correlation of the sum of two scrambling masks to all possible codewords is minimal) should be used 
in close proximity (e.g., in the same cell or adjacent cells); those with correlation properties that are not as 
"good" (i.e., having the property that the average correlation of the sum of two scrambling masks to all possible 
codewords' is more than minimal) should be used far apart (e.g., in nonadjacent cells). Correlation properties 
can include the average correlation to all possible codewords of the sum of two scrambling masks, where one 
20 of the masks has been shifted with respect to the other. 

Detailed above are methods for generating augmented sets of SU scrambling masks, where S is the num- 
ber of special masks used (S=Si or S2 or SiSJ. In this way. there are S subsets of U masks each. Two masks 
from the same subset have better cross-correlation properties (i.e.. the sum of the masks has, oh average, 
lower correlations to all possible codewords) than two masks from different subsets. 
25 This property can be exploited when allocating masks to different signals in a CDMA system. Signals in 

close proximity can be assigned masks from the same subset, whereas signals far apart can be assigned 
scrambling masks from different subsets. 

For example, each cell in a cellular system can be allocated one of the S subsets of U masks. Signals within 
a certain cell are assigned a mask from that cell's allocated subset. Thus, interference is minimized within the 
30 cell, since each subset has optimal correlation properties (i.e.. the sum of two scrambling masks is bent or 
half-bent). Therefore, within each cell, the scrambling masks available are of the form s+u. where s is one of 
the S special masks, u is one of the masks In the original set of U masks, and denotes bit by bit modulo- 
2 addition. Thus, all masks used within a cell have the same special mask s. which can be thought of as a 
base station identification (ID) mask. The mask u can then be termed a user ID mask. Thus, by storing or gen- 
35 erating S base station ID masks and U user ID masks, a transmitter or receiver can obtain any of the SU scranrv 
bling masks. This is usually more economical than storing or generating all SU masks individually. 

For a f iret numerical example, suppose the mask length is N=128 bits. The above-mentioned second way 
of generating masks when N is an odd power of two together with Method B gives N/4=32 scrambling masks 
of 128-bit length. A single maximal-length sequence of 127-bit length, extended to 128 bits, can be added to 
40 all thirty-two scrambling masks. This gives one subset of U masks, where U=32. 

Suppose this set is augmented using both complement masks (Method 1) and pattern masks (Method 2). 
using P patterns of length L each, such that PxL=N=128. For the complement masks (Method 1). suppose P 
is chosen to be sixteen and L is chosen to be eight. Using Method B. this gives P/2=8 complement nniasks. For 
the pattern masks (Method 2). suppose P is eight and L is sixteen. Using Method B. this gives L/2=8 pattern 
45 masks. Together, using both complement and pattern masks, this gives 8x8=64 special masks. Thus, there 
are sixty-four subsets of thirty-two masks each. Therefore, there are sixty-four different base station ID masks 
and thirty-two different user ID masks (U=32). If only eight base station ID masks are needed, then either pat- 
tern masks or complement masks can be used to give eight subsets of thirty-two different user ID masks each. 
As a second numerical example with N=128, the above-mentioned first way of generating masks when N 
50 is an odd power of two together with Method A gives (2Uy^ =16 scrambling masks of 128-bit length. Using the 
same eight pattern masks and the same eight complement masks as in the first numerical example above, 
sixty-four different base station ID masks and sbcteen different user (signal) ID masks can be obtained. 

As another example, 512 scrambling masks can be formed using sixteen base station ID masks and thirty- 
two user ID masks. One set of thirty-two scrambling masks is allocated to at most thirty-two conversations 
55 taking place in a particular cell. Another set of thirty-two scrambling masks is allocated to at most thirty-two 
conversations taking place in an adjacent cell, and so on. In this way. up to sixteen different base stations/cells 
can be provided with enough masks unique to themselves for supporting up to thirty-two conversations each, 
all on the same frequency channel. Furthermore, it is possible tofactorize the maskset into sixteen base station 
ID masks and thirty-two user ID masks such that every desired mask can be produced by bitwise modulo-2 
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adding a desired base station ID mask with a desired user ID mask, thereby reducing storage requirements 
from 512 masks to 16+32=48 masks. . • 

In addition. In the case that cross-correlations between the masks are not all equally low, it is possible to 
choose each set of thirty-two masks used within the same cell, and therefore more likely to interfere with each 
other to have the lowest mutual cross-correlations, while the cross-correlations with masks in different sets 
in different cells are allowed to have higher magnitudes. Which of the thirty-two user ID masks a particular 
mobile would use (in the case of a static, non-cycled allocation) would be conveyed to the mobile by the base 
station on call set-up. In the case of a pseudorandomly cycled mask allocation that is described below, the 
offset number to be used by a particular mobile would be conveyed by the base to the mobile at call set-up. 
The base ID mask in use by surrounding base stations would be conveyed by aA>ase station to all mobiles in 
its cell by being broadcast on a broadcast channel. The base ID may be static, while the user ID mask selection 
that the base ID is combined with is cyclic. The reason for this is to permit a mobile station more easily to listen 
for fixed base ID codes in order to identify which bases it can hear. 

In situations where N Is an odd power of two or when more than either np=N'^ or nB=N/2 scrambling.masks 
are desired, it may not be possible to achieve the desirable Walsh spectrum flatness property. In that case, 
it may be preferable that the "non-flat" scrambling masks, which should be as "flat" as possible, be generated 
by numerical synthesis methods performed by a computer search. Using non-flat masks, it is desirable to aver- 
age out an uneven distribution of interference correlations to avoid a particular pair of orthogonal codewords 
having more than the mean level of mutual interference or to avoid a particular codeword/information bit block 
from exhibiting a higher than average error rate. The effect of any unevenness may be reduced by cycling the 
selection of scrambling masks using a systematic or pseudorandom counter to select the masks, as described 

below. 1 -J * 

It will be appreciated that such an approach is a form of code hopping, which is analogous to the idea of 
frequency hopping, and may be applied in any CDMA system that employs a f ixed set of codes or signature 
sequences. Any CDMA system can be viewed as encoding an information signal into blocks of L code symbols. 
Each block is then impressed with a scrambling mask (i.e., signature sequence) of length L. For example, tra- 
ditional CDMA effectively repeats each information bit L times (the encoding) then applies a scrambling mask 
of length L (either a sequence of length L or a subsequence of length L). 

The method described below gives a form of orthogonal code hopping, where no two signals within the 
same group (e.g.. cell or cluster of cells in a cellular system) use the same signature sequence at the same 
time. An alternative to orthogonal code hopping is semi-orthogonal code hopping, where hopping sequences 
are designed so that two signals within the same group rarely use the same signature sequence. This alter- 
native is used when there are more signals than there are available signature sequences. A third alternative 
is random code hopping, where the signature sequence for each signal is chosen in a pseudorandom manner, 
independent of the other signals. Such an alternative is simpler to implement, but performance is degraded. 

When the allocation of scrambling masks to signals is fixed, and the mutual correlation properties between 
the members of the set of scrambling masks are not flat (e.g.. the modulo-2 sum of two members of the set 
is not a bent sequence), an adverse situation can arise where two signals having greater than the mean level 
of correlation between themselves interfere permanently with each other to a greater than mean extent. This 
situation can be prevented by time-varying or cyding the allocation of scrambling masks to signals in such a 
way that they each still receive a unique mask at any point in time but the signals exhibiting more than the 
mean level of correlation between each other are not always the same signals. For example, the interfenng 
signal exhibiting strong correlation with a given signal may be a weaker signal at one Instant and a stronger 
signal at another instant, but the interfering signal will thus not always be a shtinger signal. Therefore, adverse 
interference situations are not permanent, but rather are transient A colloquial description of the effect is to 
say that the misery is equally shared so that it is tolerable to all instead of being intolerable to some. 

This desirable cyclic or time-varying allocation of scrambling masks to signals may be effected by gener- 
ating a pseudorandom number as a function of a codeword counter. The pseudorandom number produced is 
the same at all transmitters and receivers. To guarantee that each transmitter-receiver selects a different 
scrambling mask at any time, this pseudorandom number is offset by zero for the first signal, by one for the 
second signal, and so forth using modulo-t addition, where t is the number of scrambling masks in the set In 
this way t different signals can each be guaranteed a unique but time-varying choice of scrambling mask. The 
offset pseudorandom number may be used to address a memory containing the set of scrambling masks in 
order to extract the scrambling mask that applies at each moment To give an even more random relation be- 
tween the selections for different signals, the addressing order which maps each offset pseudorandom number 
to a particular scrambling mask may also be varied firom instant to instant using another pseudorandom number. 
This variation may be accomplished by. modulo adding this second pseudorandom number tp the first offset 
pseudorandom numberand/or by using the second pseudorandom numberto permute the bite of the first offset 



EP 0 565 506 A2 



pseudorandom number before they address the scrambling mask memory. 

The present invention may be used in a cellular radio telephone communications system although those 
skilled in the art will recognize that the present invention may be used in other types of conrimunication systems 
5 as well. In CDMA based cellular systems employing subtractive demodulation, each set of scrambling masks 
generated in accordance with the present invention provides for privately protected transmissions in each cell. 
In other words, even if one were to decode the composite signal using the appropriate orthogonal block codes, 
one would still need to know which scrambling rriasks are assigned to each mobile communication before the 
information signal could be descrambled. However, in order for each mobile station to decode its own signal 
10 from the received composite signal, it must be able to decode and remove stronpr signals'received for other 
mobiles within the cell. As a result of this subtractive decoding procedure, each mobile within a cell must know 
the scrambling masks assigned to all other mobiles communicating with the base station associated with the 
cell. In addition, these scrambling masks may be selected in a pseudorandom manner based on a code key 
available to all mobiles serviced by that particular cell. To prevent mobiles within the cell from listening in on 
15 other conversations, preferred embodiments of the present invention ensure private individual conversations 
by enciphering the individual information signal before it is block coded and scrambled. Only that mobile and 
the associated base station know that individual cipher key. 

The system security and individual privacy features of the present invention will now be described in con- 
junction with Fig. 9. A source coder 80 converts speech information into digital form and assembles the infor- 
20 mation into blocks of M (or M+1) information bits for subsequent orthogonal (or bi-orthogonal) block coding. 
Only the M bit alternative is illustrated in Fig. 9, but the M+1 bit alternative is simply obtained by replacing M 
everywhere with M+1 in Fig. 9. Although not an essential aspect of this invention, the source coder 80 may 
also include conventional error correction coding capabilities. Before orthogonal coding, the M-bit (or (M+1)- 
bit) block is individually enciphered by modulo adding in an M-bit (or (M+1)-bit) adder 82 a unique enciphering 
25 bit sequence produced by a transmitter sequence generator 84. 

The pseudorandom numbers produced as a function of a cipher key K1 and a code key K2 are combined 
with the information from the source encoder 80 by M-bit adder 82 to the produce enciphered information sig- 
nals. These enciphered information signals are then spread-spectrum encoded using preferably orthogonal 
or bi-orthogonal block error-correction coding in an orthogonal block coder 86 before application of selected 
30 scrambling masks to the block codes in a bitwise exclusive-OR circuit 88. 

The M-bit ciphered block is orthogonally (or bi-orthogonally) encoded in the orthogonal block coder 86 
producing an N-bit encoded signal block (N=2m or 2^*- ^ for orthogonal or bi-orthogonal encoding, respectively) 
that is bitwise exclusive-OR'ed in the parallel exclusive-OR circuit 88 with a scrambling mask retrieved from 
a transmitter scrambling mask memory 90 and then converted to a serial bitstream and modulated on a radio 
35 carrier as represented in function block 92. The modulated signal is amplified by a suitable amplifier 94 and 
transmitted by an antenna 96. 

The scrambling mask is selected from a look-up table of masks in memory 90 by applying an Ni-bit address 
to the scrambling mask memory 90. Thus, Ni is the number of bits in the address to the scrambling mask mem- 
ory 90. and 2^1 is the maximum number of scrambling masks in the memory 90 that are uniquely addressable 
40 with an Ni-bit address. An important feature of this embodiment of the present invention is the cyclical or pseu- 
dorandom variation of the scrambling masks retrieved by a specific look-up table address. Thus, a unique 
scrambling mask must be generated and that mask selection procedure must be pseudorandomly varied. That 
table address is advantageously determined in part by the Ni-bit sequence called above code key K2. When 
an access code is received for selecting a particular scrambling mask, the code key K2 may be combined with 
45 the received access code using modulo arithmetic in Ni-bit adder 98. 

The code key K2 is preferably not pseudorandomly generated, rather it is a constant that determines the 
operation of the pseudorandom number generator used for selecting scrambling masks. As described in more 
detail below, the code key K2 ensures that the actual scrambling mask address varies pseudorandomly for 
each mobile station. The adder 82 may be a bityvise exclusive-OR circuit or a modulo-2 M-bit adder or other 
50 equivalent circuit. 

A modulo-2 adder may be modified to generate different cipher keys such as K1 by varying the number 
of bit-carry connections in the adder. All that is required is that each possible M-bit input block maps to a unique 
output block dependent on the cipher key K1 sequence and. as described below, the code key K2 sequence. 
Of course, the cipher key K1 is preferably unique to individual mobile stations to achieve the requisite privacy. 
55 The cipher key K1 may also change for each new M-bit input block so that cipher key K1 changes many times 
during a single conversation. The intended receiver must therefore synchronize its receiver sequence gener- 
ator with the transmitter sequence generator 84. 

Synchronization may be facilitated by driving the transmitter sequence generator 84 with a systematically 
varying time counter such as a frame counter 100. The receiver and transmitter^then coor^^^^ frame 
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or block number of the signal block is being decoded in order to synchronize operations. The details of obtaining 
initial frame counter agreement and maintaining it are not described here in detail because time-of-day syn- 
chronization of cipher systems is well known in the communications art 

The pseudorandom number generator 84 for scrambling mask selection randomizing is required to produce 
the same value in each of the transmitter-receivers requiring a mutually unique selection. They each are there- 
fore In possession of the same system code key K2 which is advantageously a multi-bit digital control word on 
which depends the pseudorandom number sequences produced by the generator ^. This system code key 
K2 may be globally used in one cell, one network, one country, or all over, in which case it could be permanently 
built into the design of the pseudorandom number generator. Otherwise, mean^ may be provided either for 
programming a mobile transmitter-receiver with or for receiving the code key K2fora particular cell or network. 
Such means can include a physical connection of the mobile to a programming unit, inserting a module or code 
card into the mobile, acoustic connection of the mobile to a programming unit via an acoustic coupler to its 
microphone, or receiving information over the air from the network that is used in generating a network code 
keyK2. 

Because the code key K2 used for this purpose must be globally known by a number of a different users, 
it does not provide a high level of security against eavesdropping. Thus, a preferred system to protect against 
eavesdropping includes the cipher key K1 that is unique to each user. 

Just as procedures may be required to establish a correct system code key K2 at the mobile station, the 
preferred implementation of user privacy with the aid of a unique user cipher key K1 requires procedures to 
establish the correct cipher key K1 at the base station for each user. These procedures can include the mobile 
station's identifying itself to the network by sending its ID code over the ain the network would then refer to 
a secret database wherein cipher keys are stored in correspondence with mobile ID codes to obtain the correct 
cipher key K1. It can also be advantageous for both the mobile and the network stations to combine such a 
retrieved key K1 with an extemporaneously generated pseudorandom number in order to produce a temporary 
cipher key K1 that is only used for one or a few conversations. The extemporaneously generated pseudoran- 
dom number may be transmitted from the network to the mobile station during a process of authenticating that 
the mobile is who it claims to be. as described in U.S. Patent No. 5,091.942. which is expressly incorporated 
here by reference. 

An advantage of selecting scrambling masks pseudorandomly is the avoidance of the adverse interference 
situation, mentioned above, where two signals in adjacent cells are inadvertently assigned scrambling masks 
that have a larger than mean mutual correlation, and the disposition of the mobile stations is such that inter- 
ference is thereby caused and persists. With pseudorandom variation of the choice of scrambling mask, such 
an interference condition would only exist transiently, as on the next block code period those two scrambling 
masks would be allocated to a different pair of mobile stations with a different relative disposition. 

The receiver portion of Fig. 9 has hardware analogous to the transmitter portion. A receiver/demodulator 
102 receives a composite signal from an antenna 104. demodulates it to baseband frequency, and converts 
the serial signal into parallel signal samples or blocks of N bits. As described above, the signal samples may 
be complex, resulting from in-phase and quadrature components. These signal blocks are combined in a spe- 
cialized N-sample multiplier 106 with an appropriately selected scrambling mask retrieved from a receiver 
scrambling mask storage device 108. 

In the specialized N-sample multiplier 106. each of the N parallel samples provided by the receiver/de- 
modulator 102 is multiplied by +1 or -1. depending on the scrambling mask provided by the storage device 
108. Thus, a sample is either passed as is or negated. One way to perform this multiplication is to exclusive- 
OR each bit of the digital sample with the corresponding scrambling mask bit. For example, if the first of the 
N digital samples is 1011 and the first scrambling mask bit corresponds to -1, then the first of the N output 
samples would be 0100. 

The descrambled signal produced by the multiplier 106 is decoded in an orthogonal block decoder 110 
using, for example, the subtractive demodulation;)rocedure described above. The decoded signal is descranrv 
bled by combining the appropriate cipher key K1 generated by a receiver sequence generator 112 with the 
decoded signal in an M-bit adder 114. Error correction codes are removed from the descrambled digital infor- 
mation in a source decoder 116. and the result is converted into speech. 

In Fig. 9. the RAKE combining element that was described above in connection with Fig. 8 would be part 
of the orthogonal block decoder 110. Data corresponding to the different times-of-arrival would be provided 
by the receiver/demodulator 102. 

The scrambling mask used in descrambling the received composite signal is determined in part by the 
code key K2 provided to the receiver sequence generator 112. The code key K2 is combined in an Ni-bit adder 
118 with an access code chosen by the receiver system from a list of unused access codes as indicated by 
information broadcast by the system. The Ni-bit adder 118 generates the Ni-bit address applied to the receiver 
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scrambling mask memory 108. 

The receiver sequence generator 112 is arranged to generate the same pseudorandom Ni-bit sequence 
for all memory accesses by having the sequence depend only on code key K2 that is common to all scrambling 
mask storage accesses. The pseudorandom sequence for a particular memory access is generated by adding 
an offset to that access, modulo the number of stored scrambling masks as described above. This process is 
explained below in a different way. 

Each mobile in a certain group is preferably allocated a unique scrambling mask. For example, if there are 
four scrambling masks MO, M1. M2, M3, they can be allocated to four signals SO, SI. S2, S3 as follows: 

50 gets MO ^ 

51 gets Ml 

52 gets M2 

53 gets M3. 

Alternatively, they could be allocated in any one of twentyrthree other ways such as: 

50 gets M2 

51 gets MO 

52 gets M3 

53 gets M1. 

It is desirable to vary the allocation between these different ways pseudorandomly while still guaranteeing 
each signal a unique allocation. Af irst Method of randomizing the allocation is to generate, in each mobile trans- 
ceiver, a pseudorandom number using the same recipe so that they all get the same pseudorandom number 
as a result Let this number be 3 for example. Then each mobile transceiver adds a different offset, e.g.. its 
own signal number, to this same pseudorandom number so that signal SO adds 0 to 3 getting 3 (M3), signal 
SI adds 1 to 3 getting 4, which is reduced modulo-4 to 0 (MO), signal S2 adds 2 to 3 getting 5 which reduces 
modula-4 to (M1), and signal S3 adds 3 to 3 getting 6 which reduces modulo-4 to 2 (M2). Starting with other 
pseudorandom numbers 0-2, the possible allocations are: 



pseudorandom = 
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SO gets 


M3 


MO 


Ml 


M2 


SI gets 


MO 


Ml 


M2 


M3 


S2 gets 


M1 
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MO 


S3 gets 


M2 


M3 


MO 


Ml. 



These are only four out of the twenty-four possible ways in which the signals could have been allocated 
codes. 

A second Method of randomizing the allocation may also be employed. This involves generating a second 
pseudorandom number which is modulo added to the offset, first pseudorandom number (which is the same 
as the mask number allocated as above). 

Bitwise modulo-2 addition can be chosen to illustrate the effect of this. The four possible 2-bit patterns 
00, 01. 10, 11 may thus be bitwise modulo-2 added to the addresses (mask numbers) of the scrambling masks 
in the above giving the following possible allocations: 
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For example, to generate the eighth column from the fourth column, bitwise modulo-2 add 01 to the binary 
representation of the mask number in the fourth column. Thus, for signal SO, 11+01=10 modulo-2, so SO gets 
M2, while for signal 81, 00+01=01 moduIo-2. so SI gets Ml, and for signal S2. 01+01=00 modulo-2, so S2 
gets MO, and for signal S3, 10+01=11 modulo-2, so S3 gets M3, and so forth. 

Some of these patterns produced with two pseudorandom numbers are the same as the patterns produced 
with one pseudorandom number, but the number of different patterns has increased from four to eight. 

A third Method of randomizing the allocation is to use further bits out of the pseudorandom number gen- 
erator to control a permutation of the address bits. In the above, the only other permutation is obtained by 
reversing the order of the address bits so that 0 maps to 0. 1 maps to 2 and vice versa, and 3 maps to 3, giving 
the following patterns: 
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50 For example, to generate these sixteen allocations from the previous sixteen allocations, simply inter- 

change Ml and M2 everywhere. This produces a further eight different patterns so that sixteen out of the pos- 
sible twenty-four sets of allocations are now covered. 

With a number of address bits greater than two, it is clearthat a greater number of possibilities to randomize 
the selection exist, for example, by varying the modulus of the arithmetic used in adding the offset, the first 
55 pseudorandom number, and/or the second pseudorandom number. 

It will be understood that a cipher machine generates pseudorandom numbers according to a recipe that 
depends on a secret code, or key, that is usually fbced for the length of a message or longer. The pseudorandom 
number stream still varies during the message, however. The sequence of pseudorandom numbers produced 
by the cipher machine is usually referred to as the "keystream", and the secret code that defines the recipe 
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for producing the keystream is variously called the "key", "key variable", or "cipher variabie^That part of the 
machine that generates the keystream from the key is called the "key generator". This is distinct from some 
other machine that produces pseudorandom, secret keys with which the cipher machine is programmed. To 
avoid confusion, this other machine would not also be called a "key generator"i but a "key management unit". 
Keys produced by a key management unit may be transported to a cipher machine and then injected electron- 
ically using a "fill gun". 

Sometimes in cellular systems, the key used to encipher a conversation is only used for that one conver- 
sation. It is then sometimes called the "conversation key" or "talk variable". Such a temporary key is produced 
by mixing the fixed key with a random number sent from one correspondent to tAe other, e.g.. from base (net- 
work) to mobile. This is not desirable in the case of the pseudorandom generator that drives scrambling mask 
selection since it must produce the same sequence, before offsets, in all stations. However, the technique of 
generating a temporary conversation key could well be applicable to the pseudorandom number generator that 
ciphers the source coded information before CDMA spreading. 

A further simple example is useful in illustrating how cyclic, pseudorandom scrambling mask addresses 
may be generated. If there are five scrambling masks designated (MO. .... M4), a 3-bit address (N1=3) may be 
used to select one of the five. If at a particular Instant, the receiver sequence generator 112 produces an offeet 
of two, an access code of zero is offeet by two. resulting In the selection of scrambling mask number 2 (M2). 
Alternatively, an access code of 3 is offset to a scrambling mask address of 5. Because of the modulo-5 con- 
straint. Imposed because there are only 5 scrambling masks stored, the count number 5 is actually reset to 
count 0 so that access 3 results in a mask address 0 (MO). Likewise, access 1 offsets to address 3 (M3), access 
2 offsets to address 4 (M4). and access 4 offsets to address 6 which is reset to 1 (M1). because of the modulo- 
5 constraint. Of course, the offset number varies pseudorandomly so that the addresses vary pseudorandomly. 

If the number of scrambling masks is a power of two. i.e.. 2^1, then the N^-bit adders 98, 118 can either 
be modulo- 2N1 adders or bitwise moduIo-2 adders (bitwise exclusrve-OR). If the number of scrambling masks 
is a composite number (a product of factors, some or all of which can be the same or different) L = n1n2*n3-.... 
then the adder 98 may either be a modulo-L adder or a combination of modulo-n1, modulo-n2, moduIo-n3. ..! 
adders separately for each factor or radix. It is of course much simpler to generate pseudorandom sequences 
of numbers over a range that is a power of two. 

From the discussion above, it will be appreciated that the use of scrambling masks can apply to control 
signals as well as user signals. In fact, it is sometimes desirable to use the fixed set of scrambling masks with 
optimal correlation properties for control signals only. The optimal correlation properties help to minimize in- 
terference between different control signals. In a cellular system, the correlation properties also help to min- 
imize interference between control signals In nearby cells. These control signals or channels include broadcast, 
paging, synchronization, and pilot channels. The technique of using pseudorandom numbers to encipher the 
data or the address of a scrambling mask may or may not be used when the channel Is a control channel. 

It will be appreciated by those of ordinary skill in this art that the foregoing methods and functions can be 
carried out by appropriately arranged, general- purpose, digital signal processor circuits and components. For 
better efficiency, however, specialized application-specific integrated circuits (ASICs) are preferred. 

While particular embodiments of the present invention have been described and illustrated, it should be 
understood that the invention is not limited thereto since modifications may be made by persons skilled in the 
art. The present application contemplates any and all modifications that fall within the spirit and scope of the 
underlying invention disclosed and claimed herein. 



Claims 

1. In a communications system for simultaneous communication of spectrally overlapping information sig- 
nals, a transmitter comprising: • 

means for encoding individual information signals Into blocks of codewords; 

means for generating a scrambling mask for each codeword from a set of scrambling masks that have 
optimal correlation properties; 

means for combining a different scrambling mask with each codeword to obtain uniquely scrambled co- 
dewords; and means for transmitting the scrambled codewords over a communication channel. 

2. The transmitter of claim 1. wherein the modulo-2 sum of any. one of said scrambling masks with any of 
the other masks in said set results in a sequence which is substantially equally correlated in magnitude 
to each of said codewords. 
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3- The transmitter of claim 2, wherein said substantially equal correlation correspohds to a substantially flat 
Walsh-Hadamard spectrum such that, after descrambling with the scrambling mask of a desired signal, 
interfering signals are substantially equally correlated in magnitude to all possible Walsh-Hadamard co- 
5 dewords. 

4. The transmitter of claim 1 , wherein said encoding means uses either orthogonal block codes or bi-ortho- 
gonal block codes. 

5. The transmitter of claim 1 , wherein said optimal correlation properties include the property that a modulo- 
2 sum of any one of said scrambling masks with any of the other masks in said set is a bent sequence. 

6. The transmitter of claim 1. wherein said optimal correlation properties include the property that a modulo- 
2 sum of any two of said scrambling masks is a partially-bent sequence. 

7. The transmitter of claim 1 , wherein a modulo-2 sum of any two said scrambling masks is a sequence which 
is substantially equally correlated in magnitude to half of said codewords and has substantially zero cor- 
relation with the other half of said codewords. 

8. The transmitter of claim 7, wherein said substantially equal correlation corresponds to a partially flat and 
20 partially zero Walsh-Hadamard spectrum. 

9. The transmitter of claim 1, wherein a modulo-2 sum of any two of said scrambling masks is a sequence 
which is substantially equally correlated in magnitude to a subset of said codewords and has substantially 
zero correlation to the remaining codewords. 

25 

1 0. The transmitter of claim 9. wherein said substantially equal correlation corresponds to a partially flat and 
partially zero Walsh-Hadamard spectrum. 
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11. The transmitter of claim 1, wherein said scrambling masks are formed using either permutations of Walsh- 
Hadamard codewords, permutations of a set of Kerdock codewords, or a set of Kerdock codewords. 

12. The transmitter of claim 11, wherein the set of scrambling masks includes a scrambling mask produced 
by adding a base sequence to another scrambling mask in the s6t 

13. The transmitter of claim 11, wherein said scrambling masks are formed by omitting the last half of each 
scrambling mask. 



14. The transmitter of claim 13, wherein an original scrambling mask set is enlarged by modulo-2 adding any 
of a set of special masks to each mask in the original set such that the total set of scrambling masks has 
good correlation properties. 

40 

15. The transmitter of claim 14, wherein said good correlation properties correspond to the modulo-2 sum of 
any two scrambling masks being substantially equally correlated in magnitude to a subset of the said co- 
dewords and the sum having substantially zero correlation with the remaining codewords. 

45 16. The transmitter of claim 14. wherein the special masks are formed by concatenating small length sequenc- 
es of either all zeros or all ones according to the way a good set of shorter length scrambling masks are 
formed, by substituting a small length sequence of all zeros for each zero in each scrambling mask in 
said good set and by substituting a small length of all ones for each one in each scrambling mask in said 
good set 

50 

17. The transmitter of claim 14, wherein the special masks are formed by repeating a shorter length sequence, 
such that the shorter length sequence is any mask from a good set of shorter length scrambling masks. 
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1 8. The transmitter of claim 14, wherein the special masks are formed by forming all possible modulo-2 sums 
of 

a first set of special masks formed by concatenating smaller length sequences of either all zeros or all 
ones according to the way a good set of shorter length scrambling masks are formed, by substituting a 
small length sequence of all zeros for each zero in each scrambling mask in said good set and by substi- 
tuting a small length of all ones for each one in each scrambling mask in said good set. and 
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